Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363966633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: OxPj3vXLnF0uPtPvVAzqbBlihObamWklX0/9KeIKrSY=
Subject key identifier: 8E:4A:6E:56:8B:6F:E2:C0:3D:EE:87:2B:CB:72:68:C5:8C:4B:2A:F7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1CFC3DCEBDF1859FE8950A3C15A4DAAE45C6840B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 14:35:11 +0000
ROA not before: Sun 25 May 2025 14:30:11 +0000
ROA not after: Sun 24 May 2026 14:35:11 +0000
asID: 16909
IP address blocks: 2a14:7584:69fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fc:3d:ce:bd:f1:85:9f:e8:95:0a:3c:15:a4:da:ae:45:c6:84:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 14:30:11 2025 GMT
Not After : May 24 14:35:11 2026 GMT
Subject: CN=8E4A6E568B6FE2C03DEE872BCB7268C58C4B2AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:81:aa:7e:7d:84:cb:0b:f8:a5:04:06:04:
e2:2d:96:db:33:8b:47:23:a8:ee:19:a2:7d:90:53:
8e:4f:ec:fc:e4:1a:17:e8:a0:ea:21:e0:bc:9a:dd:
94:85:68:2b:d3:a5:f8:29:24:8d:25:aa:f9:51:16:
e2:15:7f:df:d5:32:75:07:c8:4f:2d:9e:b4:55:1e:
ce:f1:cd:c6:d4:05:3f:ec:1d:22:fe:dc:66:e8:3a:
f4:af:f9:08:d7:75:9e:7c:f8:01:a7:d9:c2:22:5b:
95:aa:cc:da:84:3c:c5:a9:fc:99:ea:52:b2:29:c3:
ee:e7:87:1e:42:95:06:ef:94:90:bb:42:42:63:fe:
a1:91:fb:ce:ca:59:2e:67:9a:5c:38:21:54:86:f4:
a6:e7:d2:e6:ba:38:dc:fa:61:a9:33:ef:2c:07:cf:
ab:ed:7b:66:54:84:d5:27:c2:0c:03:cb:5d:7f:ef:
2b:b0:a2:41:53:e3:90:d6:ca:50:e7:5c:db:5b:75:
04:e1:ea:fe:e7:37:7d:d4:ef:ce:ec:76:42:eb:f2:
b3:13:6d:68:3b:7a:21:b6:aa:d1:3a:f2:ad:f0:04:
27:3e:4b:7a:66:b4:71:49:36:db:08:29:53:fd:4d:
01:57:bf:60:51:d0:fd:99:af:97:1f:92:c7:cc:60:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:6E:56:8B:6F:E2:C0:3D:EE:87:2B:CB:72:68:C5:8C:4B:2A:F7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69fc::/48
Signature Algorithm: sha256WithRSAEncryption
90:a4:b0:f6:14:7c:77:3d:f6:d0:4b:7d:c7:d6:db:0f:a3:ed:
ab:96:ad:83:36:97:0d:2e:8a:a8:1b:0a:b8:44:e7:80:8f:ce:
5b:dc:3e:6d:55:97:57:28:0c:27:a8:83:4d:fc:cc:ea:4e:ab:
e2:52:64:87:36:02:42:9c:e6:0e:bf:3c:59:9c:30:d7:48:5d:
ac:9d:52:e0:ae:c5:57:93:93:80:d6:ee:04:32:7c:af:61:26:
b6:46:59:ed:e1:10:95:41:e1:d9:d4:e9:cf:56:d0:38:3f:72:
3c:d3:75:79:cb:c8:bf:02:de:20:76:0a:36:74:f7:08:2c:08:
ea:81:58:18:61:ef:4b:d5:de:fc:9c:75:24:f1:e4:1f:ae:65:
20:cc:50:9c:cc:4d:aa:fe:e9:3a:1b:08:42:c0:a8:2c:4e:16:
91:90:98:04:19:64:a0:a9:a6:0d:f3:d9:11:67:e5:a8:0d:29:
12:e1:4a:b9:74:b4:23:4d:ad:bd:f6:ad:0c:55:6e:07:9e:fb:
16:bb:b6:4f:7b:6f:13:63:c9:15:9e:0b:3d:e4:bd:04:d7:fc:
e4:63:09:91:71:6b:01:b5:90:70:6b:7c:71:f6:90:42:6a:a1:
46:2d:56:2b:8d:84:2a:ab:db:7d:58:43:5a:7f:60:44:b6:75:
01:03:a8:36
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHPw9zr3xhZ/olQo8FaTarkXGhAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUxNDMwMTFaFw0yNjA1MjQxNDM1MTFaMDMxMTAvBgNV
BAMTKDhFNEE2RTU2OEI2RkUyQzAzREVFODcyQkNCNzI2OEM1OEM0QjJBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUYGqfn2Eywv4pQQGBOItltsz
i0cjqO4Zon2QU45P7PzkGhfooOoh4Lya3ZSFaCvTpfgpJI0lqvlRFuIVf9/VMnUH
yE8tnrRVHs7xzcbUBT/sHSL+3GboOvSv+QjXdZ58+AGn2cIiW5WqzNqEPMWp/Jnq
UrIpw+7nhx5ClQbvlJC7QkJj/qGR+87KWS5nmlw4IVSG9Kbn0ua6ONz6Yakz7ywH
z6vte2ZUhNUnwgwDy11/7yuwokFT45DWylDnXNtbdQTh6v7nN33U787sdkLr8rMT
bWg7eiG2qtE68q3wBCc+S3pmtHFJNtsIKVP9TQFXv2BR0P2Zr5cfksfMYPcNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUjkpuVotv4sA97ocry3JoxYxLKvcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzk2NjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRp/DAN
BgkqhkiG9w0BAQsFAAOCAQEAkKSw9hR8dz320Et9x9bbD6Ptq5atgzaXDS6KqBsK
uETngI/OW9w+bVWXVygMJ6iDTfzM6k6r4lJkhzYCQpzmDr88WZww10hdrJ1S4K7F
V5OTgNbuBDJ8r2EmtkZZ7eEQlUHh2dTpz1bQOD9yPNN1ecvIvwLeIHYKNnT3CCwI
6oFYGGHvS9Xe/Jx1JPHkH65lIMxQnMxNqv7pOhsIQsCoLE4WkZCYBBlkoKmmDfPZ
EWflqA0pEuFKuXS0I02tvfatDFVuB577Fru2T3tvE2PJFZ4LPeS9BNf85GMJkXFr
AbWQcGt8cfaQQmqhRi1WK42EKqvbfVhDWn9gRLZ1AQOoNg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:48 2025 by rpki-client